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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 . 1 36(a). tn no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)^ Responsive to communication(s) filed on 09 May 2005 . 
2a)^ This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 3-9 and 12-19 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) E3 Claim(s) 19 is/are allowed. 

6) £3 Claim(s) 3-9 and 12-18 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) [2 The drawing(s) filed on 16 August 2001 is/are: a)S accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . Claims 3-9 and 1 2-1 9 are pending. 

2. Amendment submitted 9 May 2005 has been entered and considered. 

Response to Arguments 

3. Applicant's arguments filed 9 May 2005 have been fully considered but they are 
not persuasive. 

4. Applicant has argued on page 8 that there is no motivation to combine the 
Alexander (US Patent No. 6,188,602) and Grawrock (US Patent No. 6,678,833) 
references. Applicant has asserted that Grawrock teaches away from the Alexander 
references by teaching that the TPM system has no reliance on any intervening devices 
and asserting that the present invention's use of an SMI handler is evidence of an 
intervening device. Examiner respectfully disagrees with this assertion. An SMI 
handler is not a "device"; it is an interupt that is incorporated into a computer's chipset. 
Further, Grawrock's teaching regarding the lack of intervening devices is directed 
towards the merging of a computer system and the TPM system such that a bios image 
does not need to be sent outside a computer system (see Figure 2). Thus, Examiner 
contends that Grawrock does not teach away from the present invention because 
Grawrock teaches a TPM system for verifying a BIOS image. 
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5. Applicant further argues on page 8 that the combination of Alexander and 
Grawrock fails to the verification of the software module before it is loaded onto the 
system. Applicant has asserted that Grawrock teaches verification after the software 
module has already been loaded onto the system. Examiner notes that reliance for this 
feature has been laid upon the Alexander reference. Examiner contends that Alexander 
teaches "if the verifying step successfully verifies the update of the utility, unlocking the 
utility and updating the utility" (Alexander, column 5 lines 41-45, if valid RBU image 
exists allow loading). Examiner further notes that as currently presented, the claims do 
not require the software module to not be loaded onto the system until verification is 
completed. 

6. Applicant has argued on page 9 that the combination of Alexander and Grawrock 
fails to teach the SMI handler being issued by the TPM. Examiner respectfully 
disagrees. Alexander teaches an SMI handler that is requested in order to perform 
verification of data (Alexander, column 5 lines 57-65). Grawrock teaches a TPM making 
a determination of whether a module is trusted (Grawrock, column 4 lines 1-40). At the 
time the invention was made, it would have been obvious to a person of ordinary skill in 
the art to have a TPM module whose purpose is the determination of trust issue an SMI 
handler whose purpose is to verify a software module because Alexander's SMI handler 
allows verification of a software module without interrupting operation of the computer 
system (Alexander, column 1 lines 35-60). 
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Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. Claims 4-6, 13-15, and 18 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Alexander et al US Patent No. 6,188,602 in view of Grawrock US 
Patent No. 6,678,833. Grawrock discloses a system for the protection of boot block 
data. 

9. With regards to claims 4 and 13, Alexander teaches the receiving of a request to 
unlock the utility (Alexander, column 5 lines 46-52, operating system requests access to 
flash), verifying an update to the utility (Alexander, column 5 lines 58-61, verify the 
data), using a system management interrupt handler to query a status of the verifying 
step (Alexander, column 5 lines 58-61 , smi access state verifies data), and if the 
verifying step successfully verifies the update of the utility, unlocking the utility and 
updating the utility (Alexander, column 5 lines 41-45, if valid RBU image exists allow 
loading). Alexander fails to teach the verifying being performed by a trusted platform 
module (TPM) in accordance with the Trusted Computing Alliance Specifications. 
Grawrock teaches verifying being performed by a trusted platform module (TPM) in 
accordance with the Trusted Computing Alliance Specifications (Grawrock, column 4 
lines 1-9, verification by a challenger). At the time the invention was made, it would 
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have been obvious to a person of ordinary skill in the art to utilize Grawrock' s method of 
using a trusted platform module because it offers the advantage of allowing the TPM to 
accurately report the identity of the boot block or utility without reliance on any 
intervening devices (Grawrock, column 2 lines 1-6). 

10. With regards to claims 3 and 12, Alexander as modified teaches the step of not 
unlocking the utility if the verifying step fails to verify the update to the utility (Alexander, 
column 5 lines 34-42). 

11. With regards to claims 5 and 14, Alexander as modified teaches the SMI handler 
used to query the status of the verifying step queries the TPM for status (Alexander, 
column 5 lines 58-61, Grawrock, column 4 lines 1-9). 

12. With regards to claims 6 and 15, Alexander as modified teaches the SMI handler 
being issued by the TPM (Alexander, column 5 lines 58-61, Grawrock, column 4 lines 1- 

13. With regards to claims 7 and 16, Alexander as modified teaches the locking of 
the utility with the SMI handler after the utility has been updated (Alexander, column 5 
lines 62-64). 

14. With regards to claim 8, Alexander as modified teaches the utility being a flash 
utility (Alexander, column 5 line 61 , flash memory). 

15. With regards to claims 9 and 17, Alexander as modified teaches the requesting 
step being performed by an SMI handler (Alexander, column 5 lines 58-62, receiving a 
request). 
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16. With regards to claim 18, Alexander teaches a processor (Alexander, column 2 
lines 56-57), a BIOS utility stored in flash memory coupled to the processor (Alexander, 
column 3 lines 45-46), input circuit for receiving an update to the BIOS utility 
(Alexander, column 5 lines 11-13), a bus system for coupling the input circuit to the 
processor (Alexander, column 3 lines 6-24), a BIOS update application requesting an 
unlock of the flash memory from a system management interrupt (SMI) handler 
(Alexander, column 5 lines 58-61), the SMI handler unlocking the flash memory if the 
SMI handler sets the status as successful (Alexander, column 5 lines 58-61 and 42-46), 
the BIOS update application updating the BIOS utility with the update (Alexander, 
column 5 lines 42-46), and the SMI handler locking the flash memory after the update of 
the BIOS utility has completed (Alexander, column 5 lines 62-64). Alexander fails to 
teach the use of a trusted platform module (TPM) and the requesting of cryptographic 
verification of the BIOS. Grawrock teaches a trusted platform module coupled to the 
processor and operating under the Trusted Computing Platform Alliance Specifications 
(Grawrock, column 3 lines 50-57, column 1 lines 24-36), the requesting of cryptographic 
verification of the BIOS utility update from the TPM (Grawrock, column 3 lines 1-18, 
hash operation, boot block identifier), the TMP including programming for issuing an 
SMI to query the TPM for a status on the verifying of the authenticity of the BIOS utility 
update (Alexander, column 5 lines 58-61 , Grawrock, column 4 lines 1-9). At the time 
the invention was made, it would have been obvious to a person of ordinary skill in the 
art to utilize Grawrock's TPM with Alexander's memory device because it offers the 
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advantage of allowing the TPM to accurately report the identity of the boot block or 
utility without reliance on any intervening devices (Grawrock, column 2 lines 1-6). 

Allowable Subject Matter 

17. Claim 19 is allowed. 

1 8. The following is a statement of reasons for the indication of allowable subject 
matter: The cited prior art, Alexander and Grawrock, fail to teach or suggest the distinct 
feature of setting a status flag to pending if a verification of the update to the flash utility 
has not completed where the verification is requested by a Trusted Platform Module by 
way of a system management interrupt. Thus, the cited prior art fails to anticipate or 
render obvious the above-cited claim. 

Conclusion 

1 9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Andrew L. Nalven whose telephone number is 571 272 
3839. The examiner can normally be reached on Monday - Thursday 8-6, Alternate 
Fridays. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory Morse can be reached on 571 272 3838. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 

Andrew Nalven 




tr:K y Jung 
Primary Examiner 




